Re: help with x.509 extrensions

2008-07-14 Thread Oil Supply
Thanks Dr. Henson, So that leaves me with some more questions. What is the new_oids section supposed to be used for? Because it looks like I just add a name=oid and then for simple strings, add the extension as name= the man pages refer to this as well. That is my confusion. My initial try at th

Re: help with x.509 extrensions

2008-07-14 Thread Patrick Patterson
On July 14, 2008 03:35:22 pm Dr. Stephen Henson wrote: > On Mon, Jul 14, 2008, Oil Supply wrote: > > On Mon, Jul 14, 2008 at 1:51 PM, Patrick Patterson > > > > <[EMAIL PROTECTED]> wrote: > > > > > > > > >> #This is the extension I want to add > > >> fooname=this is a block of text > > >> basicCons

Re: help with x.509 extrensions

2008-07-14 Thread Dr. Stephen Henson
On Mon, Jul 14, 2008, Oil Supply wrote: > On Mon, Jul 14, 2008 at 1:51 PM, Patrick Patterson > <[EMAIL PROTECTED]> wrote: > > > >> #This is the extension I want to add > >> fooname=this is a block of text > >> basicConstraints = CA:true > >> keyUsage = cRLSign, keyCertSign > >> [ crl_ext ] > >> a

Prime number generation on FreeBSD-sparc64

2008-07-14 Thread Yuliya Shulman
Hello! Hello! We're trying to use OpenSSL on FreeBSD-sparc64 and it goes into infinite loop while generating a prime number - the number generated is never prime, so it goes back for more and more. Has anyone had that problem? How did you solve it? Thank you, Yuliya P.S. Yes, I've read that FAQ

Re: help with x.509 extrensions

2008-07-14 Thread Oil Supply
On Mon, Jul 14, 2008 at 1:51 PM, Patrick Patterson <[EMAIL PROTECTED]> wrote: > >> #This is the extension I want to add >> fooname=this is a block of text >> basicConstraints = CA:true >> keyUsage = cRLSign, keyCertSign >> [ crl_ext ] >> authorityKeyIdentifier=keyid:always,issuer:always > > What i

Re: help with x.509 extrensions

2008-07-14 Thread Patrick Patterson
Hi there; On July 14, 2008 11:36:34 am Oil Supply wrote: > I have been working on trying to add extenstions to a CA certificate > and coming up short. I read through doc/openssl.txt, as well as the > man pages for openssl, ca, and req. I also searched google and the > list archives. Maybe I am jus

help with x.509 extrensions

2008-07-14 Thread Oil Supply
I have been working on trying to add extenstions to a CA certificate and coming up short. I read through doc/openssl.txt, as well as the man pages for openssl, ca, and req. I also searched google and the list archives. Maybe I am just dense. I don't believe I need to write any code. I don't care ab

Re: Openssl_malloc returns NULL.

2008-07-14 Thread vikas khanna
Yes.. Thanks for correcting me.. Vikas --- On Mon, 14/7/08, Michael S. Zick <[EMAIL PROTECTED]> wrote: > From: Michael S. Zick <[EMAIL PROTECTED]> > Subject: Re: Openssl_malloc returns NULL. > To: openssl-users@openssl.org > Date: Monday, 14 July, 2008, 5:15 PM > On Mon July 14 2008 03:34, vika

Re: Openssl_malloc returns NULL.

2008-07-14 Thread Michael S. Zick
On Mon July 14 2008 03:34, vikas khanna wrote: > > Thanks for a quick reply. > > Looking at how HMAC_Init is defined.. it calls both the function you > mentioned so I assume I am correct in using HMAC_Init . Key and md are never > null in my case. > > void HMAC_Init(HMAC_CTX *ctx, const void

Re: Openssl_malloc returns NULL.

2008-07-14 Thread vikas khanna
Thanks for a quick reply. Looking at how HMAC_Init is defined.. it calls both the function you mentioned so I assume I am correct in using HMAC_Init . Key and md are never null in my case. void HMAC_Init(HMAC_CTX *ctx, const void *key, int len, const EVP_MD *md) { if(key && md)

Openssl_malloc returns NULL.

2008-07-14 Thread vikas khanna
Hi , I am using openssl-0.9.8e in my codebase. I am using SHA1 in my code base to authenticate my data. The code seems to work fine for 5-10 mins. But after sometime it crashes as openssl_malloc returns null in function EVP_DigestInit_ex . This is defiantly not the problem of memory exhaustion